ABSTRACT 

A method and system for manipulating permissions are disclosed. A first permission, 
including a label related to a service accessible via a service web server, is maintained at a 
permission web server. A second user is provided access to the first permission upon his 
authenticating to the permission web server and is provided a permission to access the service. 
The second user will be given access to the service, upon his requesting access to the service and 
supplying the permission, if the digital signatures in the permission are positively verified. The 
second user may, instead of seeking access to the service himself, delegate permission to do so to 
a subsequent user. 
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